The charge nurse on a healthcare unit walks into the conference room and finds another nurse looking up private health information on the computer for a client that the nurse is not assigned to. The charge nurse knows that protecting health information, according to HIPAA, is designed for which of the following?